Rezultati pretraživanja za 'Od datuma: 15.12.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-108545 | 5.9 | SillyTavern 1.12.13 through 1.19.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust resources because body-parser middleware runs before authentication and whitelist checks. Attackers can send large o | 2026-10-10 15:16:57 | 2026-10-10 15:16:57 |
| CVE-2026-108115 | 4.9 | Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by supplying IPv6 6to4 or Teredo addresses that embed private IPv4 destinations. Attackers holding pro | 2026-10-10 15:16:57 | 2026-10-10 15:16:57 |
| CVE-2026-108114 | 4.3 | Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after the owner's role is field-restricted. Because reconcileTokenPermissionsToUserCeiling ignores t | 2026-10-10 15:16:56 | 2026-10-10 15:16:56 |
| CVE-2026-108165 | 4.3 | Immich through 3.3.1 contains a missing authorization vulnerability in the partner synchronization stream that allows authenticated partners to read Locked Folder asset metadata because sync queries do not exclude Locked visibility. Attackers with an | 2026-10-10 14:16:37 | 2026-10-10 14:16:37 |
| CVE-2026-108164 | 6.5 | Open Source Social Network (OSSN) through 10.1 contains an insecure direct object reference vulnerability in components/OssnMessages/ossn_com.php that allows authenticated users to read other users' private message attachments. Attackers can request | 2026-10-10 14:16:37 | 2026-10-10 14:16:37 |
| CVE-2026-108163 | 6.5 | Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds. Unauthenticated attackers can send effectively unthrottled requests to /api/auth/sign | 2026-10-10 14:16:37 | 2026-10-10 14:16:37 |
| CVE-2026-108162 | 6.5 | Pingvin Share X before 1.22.0 contains a rate limit bypass vulnerability that allows unauthenticated remote attackers to evade per-IP throttling because backend/src/main.ts unconditionally trusts proxy headers. Attackers can rotate spoofed X-Forwarde | 2026-10-10 14:16:37 | 2026-10-10 14:16:37 |
| CVE-2026-108161 | 7.5 | FusionPBX through 5.6.5 contains an OS command injection vulnerability in call_recordings::download() that allows unauthenticated attackers to execute commands by placing calls with malicious caller ID values. When the record_name filename template i | 2026-10-10 14:16:37 | 2026-10-10 14:16:37 |
| CVE-2026-107794 | - | ExtUtils::Typemaps::STL::List versions before 1.07 for Perl allocate a 32 GiB array on an empty list. The OUTPUT typemaps call av_extend( av, len-1 ). On an empty list, this undeflows, and av_extend will allocate an array with 2^32 slots, leading to | 2026-10-10 13:17:31 | 2026-10-10 13:17:31 |
| CVE-2026-107373 | - | ExtUtils::Typemaps::STL::String versions before 1.06 for Perl T_STD_STRING typemap may read the SV length before stringifying the argument. The typemap uses $var = std::string( SvPV_nolen($arg), SvCUR($arg) ) However, evaluation order for C++ | 2026-10-10 13:17:31 | 2026-10-10 13:17:31 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12162
Zapisa po stranici: